@bagelink/vue 1.18.7 → 1.19.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/vue",
   "type": "module",
-  "version": "1.18.7",
+  "version": "1.19.1",
   "description": "Bagel core sdk packages",
   "author": {
     "name": "Bagel Studio",

package/src/components/form/inputs/RichText/index.vue

@@ -30,7 +30,6 @@ import {
 import type { BagelInputShellProps } from '../bagelInputShell'
 import { useBagelInputShell } from '../bagelInputShell'
 import { RICH_TEXT_EXTENSION_REGISTRY_KEY } from './richTextExtensions'
-import { normalizeRichTextLink, sanitizeRichTextLinks } from './utils/linkPolicy'
 
 // Disable automatic inheritance of non-prop attributes
 defineOptions({
@@ -697,7 +696,7 @@ function showTooltipMessage(message: string, x?: number, y?: number) {
 function openLinkModal(selection: Selection, range: Range, existingLink: HTMLAnchorElement | null) {
 	pendingLinkData = { selection, range, existingLink }
 	linkForm.value = {
-		url: existingLink?.getAttribute('href') || '',
+		url: existingLink?.href || '',
 		title: existingLink?.getAttribute('title') || '',
 		openInNewTab: existingLink?.target !== '_self'
 	}
@@ -706,19 +705,17 @@ function openLinkModal(selection: Selection, range: Range, existingLink: HTMLAnc
 
 // Function to submit link
 function submitLink() {
-	const normalizedUrl = normalizeRichTextLink(linkForm.value.url)
-	if (!pendingLinkData || !normalizedUrl) { return }
+	if (!pendingLinkData || !linkForm.value.url) { return }
 
 	const { selection, range, existingLink } = pendingLinkData
-	const { title, openInNewTab } = linkForm.value
+	const { url, title, openInNewTab } = linkForm.value
 	const { doc } = editor.state
 
 	if (!doc) { return }
-	linkForm.value.url = normalizedUrl
 
 	if (existingLink) {
 		// Update existing link
-		existingLink.setAttribute('href', normalizedUrl)
+		existingLink.href = url
 		if (title.trim()) {
 			existingLink.title = title.trim()
 		} else {
@@ -734,7 +731,7 @@ function submitLink() {
 		// Create new link
 		try {
 			const anchor = doc.createElement('a')
-			anchor.setAttribute('href', normalizedUrl)
+			anchor.href = url
 			if (title.trim()) {
 				anchor.title = title.trim()
 			}
@@ -769,8 +766,14 @@ function submitLink() {
 
 // Function to visit link
 function visitLink() {
-	const url = normalizeRichTextLink(linkForm.value.url)
-	if (!url) { return }
+	if (!linkForm.value.url || !isValidUrl(linkForm.value.url)) { return }
+
+	let url = linkForm.value.url.trim()
+
+	// Add https:// if no protocol is specified
+	if (!url.match(/^https?:\/\//)) {
+		url = `https://${url}`
+	}
 
 	if (linkForm.value.openInNewTab) {
 		window.open(url, '_blank', 'noopener,noreferrer')
@@ -781,7 +784,20 @@ function visitLink() {
 
 // Function to validate URL
 function isValidUrl(url: string): boolean {
-	return normalizeRichTextLink(url) !== null
+	if (!url || url.trim() === '') { return false }
+
+	try {
+		URL.canParse(url)
+		return true
+	} catch {
+		// Try with https:// prefix if it's missing
+		try {
+			URL.canParse(`https://${url}`)
+			return true
+		} catch {
+			return false
+		}
+	}
 }
 
 // Function to open image modal
@@ -915,7 +931,7 @@ function submitImage() {
 
 	// Wrap the image in an anchor when a link is provided, otherwise return the bare image
 	function createImageContent(): HTMLElement {
-		const link = normalizeRichTextLink(imageForm.value.link)
+		const link = imageForm.value.link?.trim()
 		if (!link) { return img }
 
 		const anchor = doc!.createElement('a')
@@ -1985,10 +2001,6 @@ function getCleanHTML(doc: Document | null): string {
 		if (fig.classList.length === 0) { fig.removeAttribute('class') }
 	})
 
-	// Keep imported/pasted legacy links from leaking into saved output. Invalid
-	// destinations lose their href, but their visible content is preserved.
-	sanitizeRichTextLinks(clone)
-
 	const html = clone.innerHTML
 	if (!clone.textContent?.trim() && !clone.querySelector('img, video, iframe, table, hr, figure')) {
 		return ''

package/dist/components/form/inputs/RichText/utils/linkPolicy.d.ts

@@ -1,11 +0,0 @@
-/**
- * Validate and normalize a link authored in RichText.
- *
- * Relative application paths must be root-relative (`/contact`). Ambiguous
- * imported CMS links (`edit?...`, `admin/...`) are rejected instead of being
- * silently resolved against the current page.
- */
-export declare function normalizeRichTextLink(value: unknown): string | null;
-/** Remove invalid destinations while preserving their visible linked content. */
-export declare function sanitizeRichTextLinks(root: ParentNode): number;
-//# sourceMappingURL=linkPolicy.d.ts.map

package/dist/components/form/inputs/RichText/utils/linkPolicy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"linkPolicy.d.ts","sourceRoot":"","sources":["../../../../../../src/components/form/inputs/RichText/utils/linkPolicy.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAoBnE;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAc9D"}

package/src/components/form/inputs/RichText/utils/linkPolicy.ts

@@ -1,48 +0,0 @@
-const EXPLICIT_SAFE_URL = /^(?:https?:\/\/|mailto:|tel:)/i
-const BARE_DOMAIN = /^(?:localhost(?::\d+)?|(?:[a-z0-9-]+\.)+[a-z]{2,})(?:[/:?#][^\s]*)?$/i
-
-/**
- * Validate and normalize a link authored in RichText.
- *
- * Relative application paths must be root-relative (`/contact`). Ambiguous
- * imported CMS links (`edit?...`, `admin/...`) are rejected instead of being
- * silently resolved against the current page.
- */
-export function normalizeRichTextLink(value: unknown): string | null {
-	if (typeof value !== 'string') return null
-	const url = value.trim()
-	if (!url || /[\u0000-\u001F\u007F]/.test(url)) return null
-
-	if (url.startsWith('/') && !url.startsWith('//')) return url
-	if (url.startsWith('#') && url.length > 1) return url
-
-	if (EXPLICIT_SAFE_URL.test(url)) {
-		if (/^mailto:/i.test(url)) return url.slice(7).trim() ? url : null
-		if (/^tel:/i.test(url)) return url.slice(4).trim() ? url : null
-		try {
-			const parsed = new URL(url)
-			return parsed.protocol === 'http:' || parsed.protocol === 'https:' ? url : null
-		} catch {
-			return null
-		}
-	}
-
-	return BARE_DOMAIN.test(url) ? `https://${url}` : null
-}
-
-/** Remove invalid destinations while preserving their visible linked content. */
-export function sanitizeRichTextLinks(root: ParentNode): number {
-	let removed = 0
-	for (const anchor of Array.from(root.querySelectorAll<HTMLAnchorElement>('a[href]'))) {
-		const normalized = normalizeRichTextLink(anchor.getAttribute('href'))
-		if (normalized) {
-			anchor.setAttribute('href', normalized)
-			continue
-		}
-		anchor.removeAttribute('href')
-		anchor.removeAttribute('target')
-		anchor.removeAttribute('rel')
-		removed++
-	}
-	return removed
-}